URLhaus Database

You are currently viewing the URLhaus database entry for https://basicgym.es/uxgvx/parts_service/j3z3306848xp3c5mvwajff9v50beif9/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:429660
URL: https://basicgym.es/uxgvx/parts_service/j3z3306848xp3c5mvwajff9v50beif9/
URL Status:Offline
Host: basicgym.es
Date added:2020-08-11 20:11:11 UTC
Last online:2020-08-12 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-11 20:12:04 UTC to greatworktogether{at}gmail[dot]com)
Takedown time:20 hours, 13 minutes Good (down since 2020-08-12 16:25:31 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-12U_IPX_080120_NMQ_081220.docdoc c99e3c74dfec6465026a494216c1ac797697cb816f37baa98d571a089dacb73aVirustotal results 32.20%Heodo
2020-08-12BAL_83890075216864428476484.docdoc 770a00b78fd20bd3478a8d49cb5e2377ade52698cb1a178cdb3d804b8de30292Virustotal results 29.51%Heodo
2020-08-12DOC_XWAK3OH5IOMG.docdoc c061ee053937b8cc9490eddd20545bd0a75a2e3eab67bccd10fbea50aa0cd7feVirustotal results 30.00%Heodo
2020-08-12L_99856129113826801.docdoc d9d475ae79ed46f2b566d8683b5d680cced225807e23723845c1ee49efdab247n/aHeodo
2020-08-12FILE_PO_08122020EX.docdoc 2a604113da3d540e958f07fceaefe7c0bf0b84863093e22b91a9bacea6c0fd55Virustotal results 29.31%Heodo
2020-08-1213485335.docdoc ae3f98c31cbf01b3809feeb57990ae8270686b4e716f2c8971f8408ca1676532n/aHeodo
2020-08-12W_NR7804279474OP.docdoc e9b11c739e5d0a771cb4efdc41e3d084460fa975e42a309294ab185eb2836728n/aHeodo
2020-08-12FILE_YB7471527042PP.docdoc 23be0779d59df875485b237b812b0b7d7c4d53c41dd57cc961cfa570bf09eef4n/aHeodo
2020-08-12779479140.docdoc 7eba5b17df94761ce65d93039d81735e0a1525f6b3244704a023df60dd04c17en/aHeodo
2020-08-12ZFT_080120_GGD_081220.docdoc 265373b64df48b69c520486d767efa8c028ec29d4b7cfaba05e0459400ad0b2eVirustotal results 28.33%Heodo
2020-08-12D_SV2357012167NN.docdoc 397be2c8284f65fd173f3ebb49ce8059a21e4228e1a8f5eefef6772291c8c185Virustotal results 28.07%Heodo
2020-08-12MME_KY1560034997CC.docdoc 75ef3d95b4977d636664bda5c6cd5f0444ecc1ca7d0753f424bfe829474fa330Virustotal results 29.31%Heodo
2020-08-12FILE_0100788821169.docdoc a56d5701d53cd34f450eb0a957c6f5c0716a835bc9c9070e315e22f71889b72bn/aHeodo
2020-08-12WWT_PO_08122020EX.docdoc 1e1197d27bc4e2c81bf36570d41052b3f74d24df43ce0250b2d53d7b2269c20bVirustotal results 28.81%Heodo
2020-08-12REP_91783399.docdoc 158658167ef948705d54568c02e4901d9af0371490596d98384a1307dc6f7d72Virustotal results 27.87%Heodo
2020-08-12INV_TTFWWSS1WYSC7T8.docdoc 05fb55b118852bdde2c76754d2d2b2700accc08481280cc2309ab985aeb86c06Virustotal results 51.72%Heodo
2020-08-12AI8963884502NE.docdoc 8e22bd7e1069b711e14984376aa66b7994d91748a87570e44d30cc4437ab8f79n/aHeodo
2020-08-12O_BU5197385269UW.docdoc c978e204a4343d19a9b1df57379618a391455fe0f0fd17e49fcb670670c4241cn/aHeodo
2020-08-12INV_55457719.docdoc bf23bdfcb1ba099bac9552136a669b228f4fffaa65dd00d243331be54d5ff517n/aHeodo
2020-08-12U_C2EFRHLO.docdoc 035f407beebfa56f402f686f6bf72e0217cf4d4b06106b1dcb3877e1167fdfd7n/aHeodo
2020-08-12BAL_26337463.docdoc f9f228e552c3971983d4b5909776c052df083b9b41f65f764ceba0dc9d6219e7Virustotal results 52.54%Heodo
2020-08-12FILE_NFE_080120_NUI_081220.docdoc e95c19b3173d0c69d60efb950859b2ffd3020235efd6c47ffebddf950a0edf52n/aHeodo
2020-08-12REP_1313111571800627355.docdoc c6693d2980f91e4ab48ecb64b4c8ff51da5d73e384cb8d657bfa31aa00cb4641n/aHeodo
2020-08-1232439202602108663386669.docdoc 7575d9ebd2153fdfbf4c1626ec4769e8cdef40ea8e2990670f1cc5cba71a2e7eVirustotal results 51.67%Heodo
2020-08-12QT4I8GW6A53UPEH.docdoc 4c3eddd6a41f348b80609e91f83e3a9e22818758105ce3db1de70777baeae682Virustotal results 50.85%Heodo
2020-08-1298179405011298.docdoc 358176ae69d49cbdc29ce5f8965efe9952253949970d9de4e8f09f46c488e6ecn/aHeodo
2020-08-120603508843550.docdoc b06fa4a03274712b0d1bea0d2a5d1afc2c71541acb80b1054d31b661b67514ean/aHeodo
2020-08-12PO_08122020EX.docdoc e4d1deaefa7f905c5ce7490867ae09ff2d50fdf4162f102e276653c1c46eeab6n/aHeodo
2020-08-11BAL_NJ6194552884TT.docdoc 5a95e436c4df9dfb41496c96489d1bddf6db2c7d54ccf0761eb61ef1af9c83a0Virustotal results 50.88%Heodo
2020-08-11DMX_080120_PUO_081220.docdoc 896db11ae3dd47bbbdaef6de2e44964142461c89f1fd377015b96affcc75cf60Virustotal results 50.85%Heodo
2020-08-11YYH_080120_SEG_081220.docdoc 854be831ad01f15c5a5cc2f0f253d059b2a9faaac66db5b90fe51b3daa401c57Virustotal results 50.00%Heodo
2020-08-11R_WMD_080120_FKR_081220.docdoc 1aac25866333e7f77dc237137353a0a65ce189972d87658229eae96e3037bc68Virustotal results 51.72%Heodo
2020-08-11MU0002968280AV.docdoc 1d09b28a4d454266d52d7d2e5b9aeab2bbf43839ec33c9a7221eafae3c28c067Virustotal results 51.67%Heodo
2020-08-11UPR_BN7523295609QE.docdoc 2adc586ea7a59715aa3226b8b211a8d39fdc6b40691c30e3a96962d2c041688dVirustotal results 52.54%Heodo
2020-08-11YO5261254247NS.docdoc ddcfa6beac3f79149c8786ca9af44062331f6222f46f5ccfb1429ff859308dacn/aHeodo
2020-08-11L_58869094.docdoc b9be58269c46d1dba55d08e51cf5186e5c6669171b0b96d6bf2ca5b7558af124n/aHeodo